Privacy Policy

Who We Are

ElevatED Leadership Academy LLC ("ElevatED," "we," "us," or "our") is a Texas limited liability company providing AI-powered leadership development programs and a proprietary learning management platform. Our platform is available at elevateleadership.academy.

ElevatED operates on a corporate engagement model: our platform is provided exclusively to organizations as part of a consulting engagement. Learners access ElevatED through their employer or sponsoring organization, not as individual consumers purchasing a standalone subscription.

This Privacy Policy applies to all users of the ElevatED platform, including learners, managers, facilitators, and organization administrators. It also applies to representatives of client organizations who interact with us in connection with an engagement.

What We Collect

We collect the minimum data necessary to deliver an effective, personalized learning experience. The categories below describe what we collect and how it reaches us.

How We Use It

We use the data we collect for the following purposes only:

• Delivering the platform: Authenticating your account, presenting your assigned courses, tracking and displaying your progress, and resuming courses where you left off.
• Personalizing your learning experience: Using your competency assessment results, goals, and learning track to surface relevant courses and contextualize your AI coaching sessions.
• Operating the AI Leadership Coach: Passing relevant context (your goals, competency scores, recent notes) to the AI model so coaching conversations are relevant to your actual development. See the AI Coaching section below for details.
• Generating certificates: Issuing completion certificates linked to your name and the course completed, which can be downloaded or shared.
• Providing reporting to your organization: Sharing progress, completion status, and participation data with your organization's administrator(s) so they can manage their program. See the Who We Share With section for specifics.
• Communicating with you: Sending transactional emails such as password resets, enrollment confirmations, and completion notifications via our email provider (Resend).
• Improving the platform: Reviewing aggregated, de-identified usage patterns to identify bugs, improve course design, and enhance the learner experience. We do not use your individual data to train AI models.
• Security and integrity: Detecting unauthorized access, enforcing usage limits, and protecting against abuse.

We do not use your data for advertising, marketing profiling, or any purpose unrelated to your leadership development program.

AI Coaching

The ElevatED AI Leadership Coach is powered by the Anthropic Claude API (Claude Sonnet model). When you send a message to the AI coach, we transmit the following to Anthropic's API:

• Your message text
• Session conversation history (up to 40 prior messages to maintain context)
• Contextual data drawn from your profile: your leadership track, competency scores, active goals, and recent notes you have saved
• A system prompt that defines the coach's role, boundaries, and coaching methodology

We apply a daily limit of 30 coaching messages per user per day to manage platform costs and encourage intentional use of the coaching feature. Coaching session data is stored in our platform database (Supabase) to provide session continuity and allow the AI coach to reference your history in future sessions.

We do not use your coaching conversations to train or fine-tune any AI model, including our own or Anthropic's. Coaching conversations are used solely to provide the coaching service to you.

The AI coach is a professional development tool, not a licensed therapist, counselor, or human resource advisor. If you choose to share sensitive personal information during a coaching session, please understand it will be transmitted to Anthropic's API as described above.

Who We Share With

We do not sell your personal data. We do not share your data with advertisers. We share data only as described below:

Your forum posts may be visible to other learners in your organization's cohort, depending on your organization's program configuration. Do not post sensitive personal information in the Forum.

Data Retention

Learner accounts are tied to your organization's engagement with ElevatED. The standard engagement provides 90 days of platform access from the activation date.

• Active access window: Full platform functionality for 90 days from enrollment activation. If your organization renews or extends an engagement, your access window extends accordingly.
• After access expires: Your account becomes inactive. Your data, including progress records and certificates, is retained in our database for a minimum of 12 months after access expiration, so you can request a record or certificate if needed.
• Upon deletion request: If you submit a deletion request, we will delete your personal data within 30 days, except where retention is required by law or to fulfill outstanding obligations. Certificates and completion records deleted at your request cannot be reissued.
• De-identified data: We may retain aggregated, de-identified analytics indefinitely to support platform improvement. This data cannot be used to identify you.

Your organization may have its own data retention obligations that affect how long we retain records associated with their program. Your organization's data processing agreement with ElevatED governs these situations.

Security

We take data security seriously. The following measures are in place to protect your information:

• Authentication: All accounts are secured through Supabase Auth. Passwords are hashed and never stored in plain text. We enforce password confirmation at account creation.
• Row-Level Security (RLS): Our database enforces row-level security policies, meaning each authenticated user can only access their own data. Organization administrators can access data scoped to their organization only.
• Role enforcement: Users cannot change their own role. Role assignments are controlled by administrators and enforced at the database level, not only the application layer.
• Input validation and XSS protection: All user-generated content is sanitized before rendering to prevent cross-site scripting attacks.
• API protection: Our AI coaching API enforces a daily message limit per user, message length limits, and sanitizes context values before they are passed to the AI model to prevent prompt injection.
• HTTPS: All data transmitted between your browser and our platform is encrypted in transit using HTTPS/TLS via Vercel's managed infrastructure.
• No sensitive financial data: We do not collect or store payment card numbers, bank account information, or Social Security numbers on the platform.

Despite these measures, no system is 100% secure. You are responsible for maintaining the confidentiality of your account credentials. If you believe your account has been compromised, contact us immediately at hello@elevateleadership.academy.

Your Rights

Depending on your location, you may have rights regarding your personal data. We honor these rights regardless of where you are located. You may request to:

• Access the personal data we hold about you
• Correct inaccurate personal data (name, email) via your profile settings or by contacting us
• Delete your account and associated personal data
• Receive a copy of your data in a portable format
• Restrict or object to certain types of processing
• Opt out of non-essential communications

Important note for learners: Because your access to the platform is provided through your organization's engagement with ElevatED, certain requests (such as deletion) may be coordinated with your organization. We will inform you if this applies to your request.

To exercise any of your rights, please email us at hello@elevateleadership.academy with the subject line "Privacy Request." Please include your full name, email address associated with your account, and a description of your request. We may need to verify your identity before fulfilling your request.

Children

ElevatED is a professional leadership development platform intended exclusively for adults in workplace settings. Our platform is not directed to individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a minor, we will delete it promptly. If you believe a minor has accessed our platform, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy as our platform evolves, as we add new features or service providers, or as laws change. When we make material changes, we will:

• Update the effective date at the top of this page
• Post a notice within the platform or send a notification email to active users

Continued use of the platform after a policy update constitutes acceptance of the revised policy. We encourage you to review this page periodically.

Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please reach out to us: